alumni-emba-luzern.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:ef:87:95:71:5f:b8:2f:08:a3:50:ce:77:cb:54:0a:06 was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni-emba-luzern.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:ef:87:95:71:5f:b8:2f:08:a3:50:ce:77:cb:54:0a:06
Serial Number (int): 337878497467700889899626639046536649247238
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:9a:58:1b:24:24:d9:0c:69:6e:eb:9c:14:d2:c9:03:e4:33:7b:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:04:04:f7:a4:0e:d1:85:b1:9b:ef:98:b8:7c:f3:ae:19:9a:f5:76
Fingerprint (sha256): 37:db:ab:2a:57:2e:90:ff:35:10:ca:ad:30:74:5f:96:07:cd:ca:fb:b8:24:e8:fc:a7:ef:cf:79:4f:4f:22:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni-emba-luzern.ch

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni-emba-luzern.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumni-emba-luzern.ch
alumni-mba-luzern.ch
alumni-mba-luzern.com
alumni-mba-luzern.net
emba-luzern.ch
embalu.ch
executive-mba-luzern.ch
mbalu.bwise.ch
mbalu.ch
mbaluzern.ch
www.alumni-emba-luzern.ch
www.alumni-mba-luzern.ch
www.alumni-mba-luzern.com
www.alumni-mba-luzern.net
www.emba-luzern.ch
www.embalu.ch
www.executive-mba-luzern.ch
www.mbalu.ch
www.mbaluzern.ch

Other certificates including the domain name alumni-emba-luzern.ch

(limited to 100 certificates)
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch

Certificate

The complete raw certificate details for alumni-emba-luzern.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MnDyQT+3iXSqJV9d8Iq
wtOWxqljd/AqX2eZcej6WrNSXzrM+2twe85Ri3B9yEI326CTvi519ueEklnUA0ho
9ZXLf8A4MxoMLweK7+9SP5us1RSpq3XPUFCgthFLbbG8JsnTkLk/fWP157dCEvjr
Fjulw6Syhprjh0SMZaQzJAEqQpWjb8jKlH1ve/Expjy96HzCYcXYTyA5htaiMU7i
m3B8LpeFQLcWzSqGe0NJAKmM4IkvkEd7vEY1SEL33mAhefPvtUdpWySJo6pZcBGA
LDHxC3EpSm4A3fJwx6CmC8IHXoejYYDzFYzDJsdtiwCTyYjgOcvm50VxHZKk/8Do
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337878497467700889899626639046536649247238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 05:19:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 05:19:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni-emba-luzern.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28881827456459039314111023933410502590656428073375654896020987922791259623604027634621974496908082307106106388705870654983130718730472622488878613835150127811089188368076997437254130955577986318204717846914607098570578800777656183460963633979772779320123926289553860749891835638258184830806113764733474654849457535779874949988206230256927544253806057605904214352939866834040020838082958191409453271206048410397686769609436318799984066320261949656939300809922798944678672127043436547691048897795217366764027793685521807604294029799439200021385836164591533444644880613628474877384700979245327262441122790032082833827869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							769a581b2424d90c696eeb9c14d2c903e4337bb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-mba-luzern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-mba-luzern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executive-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalu.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbaluzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-mba-luzern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-mba-luzern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executive-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbaluzern.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e11055bd20000040300473045022100f8e163a30c348247f166d38a45becf9bc4be75ae9823c6c184213d4435292982022018dfd2ee18b74a678cc554df572fbfbc0fa0033dabc59e42b72dd7d14b39d739007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e11055bc60000040300473045022100b96f51143151a84e4dbd1d155158cd25ea2bb7790697e09e22e681ec89aafc76022019c76db8a4e2bfc12f9eacb4b08b3566a61483b34bedc32076598ba5853fec7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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